CVE-2020-25746

2020-11-1713:20:11

mitre

www.cve.org

qed resourcexpress

qubi3

debug interface

vulnerability

sensitive information

usb cable

wireless password visibility

AI Score

4.4

Confidence

High

EPSS

0.001

Percentile

30.8%

JSON

QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker (with physical access to the device) to obtain sensitive information via the debug interface (keystrokes over a USB cable), aka wireless password visibility.

References

resourcexpress.atlassian.net/wiki/spaces/RSG/pages/878641153/v1.40.9

www.resourcexpress.com/meeting-room-booking-systems/hardware/qubi3/